This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/3949DB48056711F09B0C9329C4F9AE02.roa File: 3949DB48056711F09B0C9329C4F9AE02.roa (raw, json) Hash identifier: b7nWTvwMcF+hjF4Bbfy/r9EubUG9gSmXulrB9jKm7d0= Subject key identifier: 04:FC:0E:B0:B7:0F:69:2B:6C:BC:AC:FA:26:49:96:D3:97:A1:96:58 Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Certificate serial: 0FB7 Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/3949DB48056711F09B0C9329C4F9AE02.roa Signing time: Wed 14 Jan 2026 18:15:18 +0000 ROA not before: Wed 14 Jan 2026 18:15:18 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 800 IP address blocks: 125.252.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 17:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4023 (0xfb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Validity Not Before: Jan 14 18:15:18 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6967dd36-2487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a8:94:21:eb:e5:70:12:0f:45:c0:28:7f:a4: a6:9d:88:ba:97:df:81:82:15:5d:10:89:04:5a:b2: 24:28:42:49:29:54:2f:2f:e2:6c:8d:4c:c5:65:dc: e2:32:e3:da:6a:75:25:24:ef:2f:6a:20:d9:95:88: 20:0a:3c:ad:b2:42:01:49:f0:43:d1:65:e0:1f:f9: 31:b2:6a:65:fc:97:37:ff:60:64:e8:23:01:d3:fa: fa:a8:eb:04:79:b0:1e:8e:66:f8:6a:81:12:df:d7: e5:fb:ff:84:e4:63:65:58:0e:8d:29:9e:a4:dd:61: c6:a5:50:6e:d2:bb:9c:d5:41:3a:b9:8e:b5:7b:76: da:02:09:ac:4d:7a:99:eb:8f:24:6b:70:17:70:f6: c4:8a:1c:9f:b0:b3:46:bc:93:42:ec:8e:a7:4c:f3: 1f:7a:73:ac:34:d5:38:da:d9:46:01:19:d8:d4:e8: 57:5d:b9:ef:a9:ae:3d:42:b3:3a:90:af:31:8c:3b: c4:c2:9e:59:ae:1e:82:24:93:fe:7c:52:bc:ba:7c: 31:73:89:4d:77:0c:b9:69:9b:27:ac:8b:e1:3f:ba: dc:f1:21:29:d8:43:12:48:d3:21:d0:67:eb:bc:22: 28:d1:c5:42:a6:d7:fa:89:ec:4c:b8:0e:a3:74:64: 35:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FC:0E:B0:B7:0F:69:2B:6C:BC:AC:FA:26:49:96:D3:97:A1:96:58 X509v3 Authority Key Identifier: keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/3949DB48056711F09B0C9329C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.252.79.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:22:8c:1d:f6:13:3f:56:e4:dc:c8:63:ae:84:23:53:fd:a7: 2c:db:c6:80:61:39:2e:ec:4e:b0:19:81:62:c5:7f:54:31:f5: f4:75:0d:8d:d1:4e:49:a7:18:ca:78:7b:45:1b:d0:0e:79:9a: 6d:b4:1b:22:32:57:a3:2c:0f:49:af:02:1e:da:15:a5:db:2e: 90:e8:40:e9:71:81:2e:7c:f3:5e:f2:b7:09:e4:c5:67:d7:f5: 2f:d9:c7:da:25:88:37:0e:6a:0e:03:6d:bf:e4:1e:3f:18:35: 5a:bf:ab:46:7f:b6:90:1e:a7:5f:8d:b4:48:eb:91:ab:72:aa: 55:ef:cf:ce:4f:31:a2:22:e1:0d:c2:21:0f:68:0d:62:b7:6e: f1:35:ac:2d:56:e6:4b:f8:be:40:f7:25:1c:bc:3e:20:cf:55: 34:96:0b:11:cd:ec:bf:4f:4c:ad:6c:68:01:c3:8c:8a:35:c9: a1:b9:c2:ad:2f:13:3b:22:dc:6a:58:b2:a6:0d:0c:b8:ce:e4: 03:1b:72:68:bb:46:35:82:70:bf:61:5d:43:d8:78:ab:a8:81: a9:3d:c3:64:ac:a2:27:b2:55:ed:97:99:a5:a7:97:a1:28:a8: c4:5a:dd:30:fe:ee:d1:3b:6e:78:49:8a:e5:0e:89:45:36:69: 5a:1e:a5:40 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICD7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx Q0ZGQTAxMTAvBgNVBAUTKEFERDk0MThGMEY5QjU1RjNCNzM3NkEwOTNEQjExREJB RDNBRUZFQzgwHhcNMjYwMTE0MTgxNTE4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTY3ZGQzNi0yNDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6iUIevlcBIPRcAof6SmnYi6l9+BghVdEIkEWrIkKEJJKVQvL+JsjUzFZdzi MuPaanUlJO8vaiDZlYggCjytskIBSfBD0WXgH/kxsmpl/Jc3/2Bk6CMB0/r6qOsE ebAejmb4aoES39fl+/+E5GNlWA6NKZ6k3WHGpVBu0ruc1UE6uY61e3baAgmsTXqZ 648ka3AXcPbEihyfsLNGvJNC7I6nTPMfenOsNNU42tlGARnY1OhXXbnvqa49QrM6 kK8xjDvEwp5Zrh6CJJP+fFK8unwxc4lNdwy5aZsnrIvhP7rc8SEp2EMSSNMh0Gfr vCIo0cVCptf6iexMuA6jdGQ1bwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAT8DrC3 D2krbLys+iZJltOXoZZYMB8GA1UdIwQYMBaAFK3ZQY8Pm1XztzdqCT2xHbrTrv7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xRDY2RDQ4NkQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9yZGxCanctYlZmTzNOMm9KUGJFZHV0T3Vf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkbEJqdy1iVmZPM04yb0pQYkVkdXRPdV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZGQTAvMUQ2NkQ0ODZEOENCMTFFOUJBRTI0RDIxQzRGOUFFMDIvMzk0OURCNDgw NTY3MTFGMDlCMEM5MzI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB9/E8wDQYJKoZIhvcNAQELBQADggEBABsijB32Ez9W5NzI Y66EI1P9pyzbxoBhOS7sTrAZgWLFf1Qx9fR1DY3RTkmnGMp4e0Ub0A55mm20GyIy V6MsD0mvAh7aFaXbLpDoQOlxgS58817ytwnkxWfX9S/Zx9oliDcOag4Dbb/kHj8Y NVq/q0Z/tpAep1+NtEjrkatyqlXvz85PMaIi4Q3CIQ9oDWK3bvE1rC1W5kv4vkD3 JRy8PiDPVTSWCxHN7L9PTK1saAHDjIo1yaG5wq0vEzsi3GpYsqYNDLjO5AMbcmi7 RjWCcL9hXUPYeKuogak9w2SsoieyVe2XmaWnl6EoqMRa3TD+7tE7bnhJiuUOiUU2 aVoepUA= -----END CERTIFICATE-----Generated at Wed Jan 21 22:26:26 2026 by rpki-client